Apache Kylin vulnerabilities

• apache kylin Apache Kylin: Improper authorization in job information retrieval CVE-2026-62393 4.3 MediumJuly 14, 2026
• apache kylin Apache Kylin: OS Command Injection via Async Query API CVE-2026-62392 9.8 CriticalJuly 14, 2026
• apache kylin Apache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh API CVE-2026-62390 9.8 CriticalJuly 14, 2026
• apache kylin Apache Kylin: Server-Side Request Forgery CVE-2025-61735 Fix available 7.3 HighOctober 2, 2025
• apache kylin Apache Kylin: Authentication bypass CVE-2025-61733 Fix available 7.5 HighOctober 2, 2025
• apache kylin Apache Kylin: improper restriction of file read CVE-2025-61734 Fix available EPSS 26.1% 7.5 HighOctober 2, 2025
• apache kylin Apache Kylin: The remote code execution via jdbc url CVE-2025-30067 Fix available 7.2 HighMarch 27, 2025
• apache kylin Apache Kylin: SSRF vulnerability in the diagnosis api CVE-2024-48944 Fix available 6.5 MediumMarch 27, 2025
• apache kylin Apache Kylin: Session fixation in web interface CVE-2024-23590 Fix available 9.1 CriticalNovember 4, 2024
• apache kylin Apache Kylin: Insufficiently protected credentials in config file CVE-2023-29055 Fix available 7.5 HighJanuary 29, 2024
• apache kylin Apache Kylin: Command injection by Diagnosis Controller CVE-2022-44621 Fix available 9.8 CriticalDecember 30, 2022
• apache kylin Apache Kylin: Command injection by Useless configuration CVE-2022-43396 Fix available EPSS 55.3% 8.8 HighDecember 30, 2022
• apache kylin Apache Kylin prior to 4.0.2 allows command injection when the configuration overwrites function overwrites system parameters CVE-2022-24697 Fix available EPSS 84.8% 9.8 CriticalOctober 13, 2022
• apache kylin Hardcoded credentials CVE-2021-45458 Fix available 7.5 HighJanuary 6, 2022
• apache kylin Overly broad CORS configuration CVE-2021-45457 Fix available 7.5 HighJanuary 6, 2022
• apache kylin Command injection CVE-2021-45456 Fix available EPSS 88.9% 9.8 CriticalJanuary 6, 2022
• apache kylin Mysql JDBC Connector Deserialize RCE CVE-2021-36774 Fix available 6.5 MediumJanuary 6, 2022
• apache kylin Apache Kylin unsafe class loading CVE-2021-31522 Fix available 9.8 CriticalJanuary 6, 2022
• apache kylin Improper Access Control to Streaming Coordinator & SSRF CVE-2021-27738 Fix available 7.5 HighJanuary 6, 2022
• apache kylin Authentication bypass in Apache Kylin CVE-2020-13937 Public exploitFix available EPSS 78.3% 5.3 MediumOctober 19, 2020
• apache kylin SQL Injection in Kylin CVE-2020-13926 Fix available 9.8 CriticalJuly 14, 2020
• apache kylin Command Injection in Kylin CVE-2020-13925 Public exploitFix available EPSS 20.0% 9.8 CriticalJuly 14, 2020
• apache kylin Command Injection in Kylin CVE-2020-1956 In KEVPublic exploitFix available EPSS 97.4% 8.8 HighMay 22, 2020
• apache kylin SQL Injection in Kylin CVE-2020-1937 Public exploitFix available 8.8 HighFebruary 24, 2020